Security Engineer

Verito; New Delhi, Dadri; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Verito seeks a Senior Security Engineer to serve as the in-house SME for security across VeritSpace and VeritGuard. You will own the security program, drive compliance readiness, and lead detection, incident response, and vulnerability management for a growing hosted environment.

You will work with IT leadership, infrastructure SMEs, and support teams, using AI tools, and guide others in secure practice. This is a hands-on role based in Noida with US hours.

Qualifications

• Minimum five years of hands-on information security experience.
• Two+ years in security operations or incident response in MSP/hosting/regulatory environments.
• Strong defensive skills in EDR, log analysis, threat hunting, and incident handling.

Responsibilities

• Own the security program, policies, standards, risk register and security roadmap; present to leadership.
• Own compliance readiness for SOC 2 Type II, IRS 4557, FTC Safeguards Rule, and WISP; provide evidence and audit support.
• Lead detection and response on CrowdStrike Falcon; tune policies and coordinate with MDR providers.

Skills

EDR

Log analysis

Threat hunting

Incident handling

Windows

Active Directory

Vulnerability scanning

Penetration testing

AD attack paths

Firewall policy

CIS hardening

M365 security controls

SOC 2

FTC Safeguards Rule

Risk communication

English fluency

Tools

CrowdStrike Falcon

Palo Alto Networks

Duo

Veeam

Defender for Office 365

Job description

Verito is hiring a Senior Security Engineer to serve as its in-house Subject Matter Expert (SME) for security across the VeritSpace and VeritGuard lines of business. As the hosted environment and managed services grow, security needs one owner who covers defense, offensive testing, hardening, audits, and documentation end-to-end. This is a hands-on specialist role that works with the Manager - IT, the infrastructure and identity SMEs, and the Support teams, and serves as the top escalation point for security issues in both lines of business. AI tools are part of the daily toolkit, and the incumbent selects the right tools for security work and guides others in using them safely.

Company Overview

Verito is a managed IT and cloud hosting provider built exclusively for tax and accounting firms in the United States. Founded in 2016 by Jatin Narang, Verito serves 1,000+ accounting and bookkeeping firms nationwide, maintaining a 100% uptime record during tax season and a 92% first-touch support resolution rate.

Scope of Responsibilities

Security Program & Compliance

Own the security program, including policies, standards, the risk register, and the security roadmap, and present status and top risks to leadership.

Own compliance readiness for SOC 2 Type II, IRS Publication 4557, the FTC Safeguards Rule, and Verito's Written Information Security Plan (WISP), including evidence and audit support.

Respond to client security questionnaires and audits, review vendor security risk, and serve as the security escalation point for VeritGuard compliance clients.

Detection & Incident Response

Own detection and response on CrowdStrike Falcon, including policy tuning, threat hunting, and log analysis in Falcon LogScale, and coordinate with managed detection and response (MDR) providers where they are used.

Lead security incidents, including malware, ransomware, and business email compromise (BEC), from containment through recovery, and deliver Root Cause Analysis (RCA) reports.

Maintain the incident response plan and playbooks, and run tabletop exercises with the technical teams.

Offensive Security & Vulnerability Management

Perform in-house vulnerability scans, internal penetration tests, Active Directory attack-path assessments, and phishing simulations, and prepare the scope for external penetration testing after internal audits are complete.

Run the vulnerability management program, ranking findings by risk and tracking remediation with system owners to agreed timelines.

Hardening, Network Security & Enablement

Define hardening baselines aligned with Center for Internet Security (CIS) benchmarks for servers, domain controllers, hypervisor hosts, the golden VM image, and Microsoft 365 tenants.

Own Palo Alto firewall security policy, including rule reviews, client segmentation, VPN security, and the per-client rollout of licensed threat prevention modules.

Review privileged access, multi-factor authentication (MFA) coverage, and backup protection against ransomware with the identity and backup owners.

Build security documentation and staff awareness training, and mentor engineers on secure practices.

Role Modeling & Culture

Technical mentoring: acting as the team's technical reference and mentoring agents on complex cases through shadowing, troubleshooting together and debriefs after a case is resolved.

Key Performance Metrics

Detection & Response:Mean time to detect and contain incidents, and share of incidents closed with a completed RCA.

Vulnerability Management:Critical and high findings fixed within agreed timelines, and open findings over time.

Hardening & Audit:Share of systems meeting approved baselines, and audit findings closed on time.

Required Qualifications

A minimum of five (5) years of hands-on information security experience, including at least two (2) years in security operations or incident response at a managed service provider (MSP), hosting provider, or regulated business.

Strong defensive skills, including Endpoint Detection and Response (EDR), log analysis, threat hunting, and incident handling in Windows and Active Directory environments.

Hands-on offensive skills, including vulnerability scanning, penetration testing methods, and Active Directory attack paths.

Working knowledge of firewall policy and segmentation, CIS-based hardening, Microsoft 365 security controls, and frameworks such as SOC 2 and the FTC Safeguards Rule.

Demonstrated ability to explain risk to leadership and clients, write clear security documentation, and drive remediation across teams.

Full professional fluency in written and spoken English, as the primary working language with United States-based clients.

Availability to work a full night shift from the Noida office, covering United States business hours.

Ability to operate independently with minimal day-to-day oversight and to take responsibility for significant security risks.

Preferred Qualifications

Experience with CrowdStrike Falcon, Palo Alto Networks firewalls, Duo, Veeam, and Microsoft Defender for Office 365.

Certifications such as OSCP, CISSP, or GIAC incident handling credentials.

Experience in MSP, cloud hosting, or accounting and tax technology environments.

Scripting in PowerShell or Python for security automation, and familiarity with AI tools such as Claude.